pstore brings support for three roles (public, user, admin), but states it’s easy to add more. Will see!

multitenacy

a first glance suggests that this might be something we need to add or wrap around pstore.

self-service (“I forgot my password’)

can be wrapped around pstore

allow for addition of two-factor auth

This item is on the list to make sure 2FA is a requirement not to be forgotten,
but it does not need to be present from the beginning. If one adds 2FA, I would go and see that
privacyIDEA is being used as the backend.